Privacy Policy

Version: 1.0  |  Last Updated: 18 August 2026

This Privacy Policy ("Policy") describes how betonredreview.com (the "Platform", "we", "us", or "our") collects, processes, stores, and discloses personal data relating to users of our website and services ("Players" or "you"). This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

We are committed to protecting your personal data and processing it in a lawful, fair, and transparent manner in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and any applicable national implementing legislation.

By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we process your personal data, please discontinue use of the Platform and contact us to request Account deletion.

1. Introduction

1.1. Scope

This Policy applies to all personal data collected by us in connection with your use of the Platform, whether accessed via desktop, mobile browser, or any application. It covers data collected directly from you, data generated through your use of the Platform, and data received from third parties (such as payment processors and identity verification providers).

1.2. Data Controller

The operator of betonredreview.com acts as the Data Controller for the personal data processed under this Policy. For all data protection enquiries, including the exercise of your rights, please contact our Data Protection Officer (DPO) at [email protected].

2. Data We Collect

We collect the following categories of personal data:

2.1. Registration & Identity Data

• Full legal name;
• Date of birth and age verification information;
• Residential address (including country, city, and postcode);
• Email address;
• Username and encrypted password;
• Telephone number (where provided).

2.2. KYC & Verification Data

• Copies of government-issued identity documents (e.g., passport, national ID card, driver's licence);
• Proof of address documents;
• Source of funds documentation;
• Photographs or selfies used for biometric verification (where applicable).

2.3. Financial Data

• Payment method details (e.g., card numbers — stored in a tokenised form only);
• Transaction history (deposits, withdrawals, bonuses);
• Account balance information;
• Currency preferences.

2.4. Gaming & Behavioural Data

• Games played, stakes placed, and winnings recorded;
• Session durations and timestamps;
• Bonus usage and wagering activity;
• Self-exclusion and Responsible Gaming tool usage;
• Communications with our support team.

2.5. Technical & Usage Data

• IP address and geolocation data;
• Device type, operating system, and browser version;
• Pages visited, links clicked, and time spent on the Platform;
• Cookie identifiers and session tokens (see Section 6);
• Log files and error reports.

2.6. Marketing & Communication Data

• Marketing preferences and opt-in/opt-out records;
• Email open rates and click-through data (where applicable);
• Survey responses and feedback submitted to us.

3. How We Use Your Data

We use your personal data for the following purposes:

• Account Registration & Management: To create, maintain, and operate your Account, verify your identity and eligibility, and provide access to our services;
• KYC & Compliance: To carry out identity verification, age verification, and source-of-funds checks in fulfilment of our legal and regulatory obligations;
• Payment Processing: To process deposits and withdrawals securely and to detect and prevent payment fraud;
• Game Provision: To deliver the Games and services you request, personalise your experience, and maintain game integrity;
• Customer Support: To respond to your queries, manage complaints, and provide technical assistance;
• Anti-Fraud & AML: To detect, investigate, and prevent fraudulent activity, money laundering, and other forms of financial crime;
• Responsible Gaming: To monitor gambling behaviour, identify potential signs of problem gambling, and administer Player Protection Tools as described in our Responsible Gaming Policy;
• Marketing: Where you have provided your consent or where we have a legitimate interest, to send you promotional communications about our offers, products, and services;
• Analytics & Improvement: To analyse Platform usage patterns and improve our services, user interface, and content;
• Legal Obligations: To comply with applicable laws, regulations, and orders from competent authorities.

4. Legal Bases for Processing

We process your personal data on the following legal bases as defined under Article 6 GDPR:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw consent, contact us at [email protected].

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties where necessary and lawful:

• Identity Verification Providers: For KYC checks and age verification;
• Payment Processors: To process deposits and withdrawals (e.g., card networks, e-wallet providers, banking institutions);
• Game Software Providers: To deliver gaming content; such providers may receive pseudonymised gameplay data;
• Fraud Prevention & AML Service Providers: To detect and prevent financial crime;
• Marketing & Analytics Platforms: Where you have consented to marketing, to deliver and measure promotional communications;
• Customer Support Tools: To manage and track support queries;
• IT & Cloud Infrastructure Providers: To host and operate the Platform securely;
• Regulatory Authorities: Where required by applicable law or court order.

5.2. No Sale of Personal Data

We do not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes.

5.3. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies independently.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently and to provide information to the website operators. We use cookies and similar tracking technologies (including pixels, web beacons, and local storage) on the Platform.

6.2. Types of Cookies We Use

6.3. Cookie Management

You may manage your cookie preferences at any time through our Cookie Consent banner or by adjusting your browser settings. Disabling strictly necessary cookies may impair certain functionalities of the Platform. Please note that our Platform respects the Do Not Track signal where technically feasible.

7. Data Security

7.1. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmissions between your device and our servers;
• Encryption at rest for sensitive personal and financial data;
• Access controls and role-based permissions limiting staff access to personal data;
• Regular security audits and penetration testing;
• Tokenisation of payment card data;
• Two-factor authentication options for user Accounts.

7.2. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. General retention guidelines are as follows:

• Account and KYC data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, in accordance with AML legal requirements;
• Transaction records: Retained for a minimum of 5 years;
• Gaming and session data: Retained for 2 years following your last login or as required by law;
• Marketing data: Retained until you withdraw consent or opt out;
• Support communications: Retained for 3 years following closure of the relevant ticket.

8.2. Deletion

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where anonymisation is not possible, data will be securely archived and access will be restricted.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of Access (Art. 15 GDPR): You have the right to obtain a copy of the personal data we hold about you;
• Right to Rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete data corrected;
• Right to Erasure (Art. 17 GDPR): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing;
• Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format for transfer to another controller;
• Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the competent supervisory authority — in Greece, this is the Hellenic Data Protection Authority (HDPA) (www.dpa.gr).

To exercise any of the above rights, please submit a written request to [email protected]. We will respond within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, of which we will notify you.

10. International Data Transfers

10.1. Transfers Outside the EEA

Some of our third-party service providers are located outside the European Economic Area (EEA). Where we transfer personal data to recipients outside the EEA, we ensure that appropriate safeguards are in place, including:

• European Commission adequacy decisions;
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) where applicable;
• Other legally recognised transfer mechanisms.

10.2. Further Information

For further details about international data transfers and the safeguards we apply, please contact our DPO at [email protected].

11. Minors

Our services are strictly directed at individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from an underage person, we will take immediate steps to delete such data and close the associated Account. If you believe a minor has provided personal data to us, please contact us immediately at [email protected]. For more information on our approach to the protection of minors, please refer to our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by email or by displaying a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us:

• General Support: [email protected]
• Privacy / Data Protection Officer: [email protected]

We are committed to resolving data protection concerns fairly and promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the Hellenic Data Protection Authority (HDPA), Kifissias 1–3, Athens 115 23, Greece, tel. +30 210 6475 600, website: www.dpa.gr.